3z57uff Goto Github PK

aceldr_modded

Cobalt Strike UDRL for memory scanner evasion.

adventofcode2023

Advent of Code 2023

airstrike

angryorchard

A kernel vulnerability used to achieve arbitrary read-write on Windows prior to July 2022

beacon

Former attempt at creating a independent Cobalt Strike Beacon

blackbone

Windows memory hacking library

blacklotus

A attempt at replicating BLACKLOTUS capabilities, whilst not acting as a direct mimic.

bootdoor

An initial proof of concept of a bootkit based on Cr4sh's DMABackdoorBoot

bootlicker

A generic UEFI bootkit used to achieve initial usermode execution. It works with modifications.

clr-thing

rust clr heap encryption (https://github.com/lap1nou/CLR_Heap_encryption), but no heap encryption.

codecave

A bunch of scripts and code i wrote.

darkwidow

Indirect Dynamic Syscall, SSN + Syscall address sorting via Modified TartarusGate approach + Remote Process Injection via APC Early Bird + Spawns a sacrificial Process as target process + (ACG+BlockDll) mitigation policy on spawned process + PPID spoofing + Api resolving from TIB + API hashing

dojoloader

Generic PE loader for fast prototyping evasion techniques

dotfiles

doublepulsar

An unfinished DOUBLEPULSAR clone. Set to be redone at a later date

doublepulsar-rdp

Another unfinished doublepulsar RDP variant from years ago. Demonstrates hooking McsDispatch, never wrote the hook itself

effective-waffle

yet another sleep encryption thing. also used the default github repo name for this one.

ekko

Sleep Obfuscation

fictional-invention

idk man this was the default github name

foliage

Experiment on reproducing Obfuscate & Sleep

foliage-1

A proof of concept I developed to improve Gargoyle back in 2018 to achieve true memory obfuscation from position independent code

ghost

A sample client/server architecture

grimreaper

A improved memory obfuscation primitive using a combination of special and 'normal' Asynchronous Procedural Calls

hackspacecon2024stackworkshop

havoc

The Havoc Framework.

hellhallshellcodetemplate

hp_bn

indirect-syscall-shellcode-loader

jargon

krbdump

A way to extract tickets in case I need to purge and restore tickets on the fly.